1.
•
• C D
• D
•
• 0
• 2 1
7

2.
Web Crawlers App store APIs
S
C
5
Capability
Assessment
Exploit
Assessment5
9 6L 9 9 L
7
c
Mobile Sensors
00 0 1 /0 +

3.
Securing the post perimeter world

4.
5
Internet
Internet
Web
Proxy
Web
http://www http://www
Internet
http://www

5.
WN
W IS
IS
IS
V
a
D
G D
V
, , N
WF
P
MP V
, ,N V

6.
OS
7

7.
8
WiFi
Jailbreak/Root

8.
10
/
W
F

9.
5535 6 I L P
. I L P
P E
P E
112/
E
EMO
5535 6 P E A 6 S
A 112/ E D
Intune
+

10.
1. Intune Lookout MES
AAD Tenant ID Group Object ID Lookout
2. Intune Mobile Threat Defense(MTP) Lookout for Work(L4W)
3. AAD L4W iOS Android
4. Intune
5. L4W
AAD Deny/Allow
6. ( )
7.

11.
Lookout MES
Intune/AAD

12.
– > > >

13.
1. Intune 2. 3.
4.Intune 5.Intune
6.Lookout (MES)
7.

14.
20
INCIDENT RESPONSE
Lookout MES
! X
X
Lookout
MOBILE RISK API

15.
+ +
Machines Reporting
(OS
)
“Top machines at risk”
“Top users at risk”
“Service Health”
- Lookout MES
- Lookout
Machines Reporting
(OS
)

16.
: iOS
2 Exploits
Jailbreak
1.
2. C&C
3.
Safari Exploit
Safari Jailbreak
SMS

17.
https://blog.lookout.com/esurv-research
Android 2016 Google Play Store
”Exodus” iOS
iOS
Android
iOS
GPS
Android C2
April 8, 2019 Lookout

18.
• O
• W
S
• M S
• M

19.
: C / : E
: C 2 5C C6
,
R MHL
aN e
: C E e
5 U
31 46 IN c
a P S U
5 Nd
: C . 2U

20.
) 1
1. Hangouts
2.
3.

21.
) 2
1. HTML
URL
2.
3.

22.
30